Roadmap

Integration & protocol status

What is live on abraxasworld.xyz today, what awaits pilot evidence, and which release gates remain open. Reconciled against merged PRs — not marketing promises.

How we got here

We built zkLogin Passport, biometrics, the Trust Engine, and Partner Flow APIs on abraxasworld.xyz.

P1-2 (validity + idempotency) and P1-3 (audit traceability) merged to main with operator tooling.

Good Trouble is the reference pilot checkout — sandbox/pilot until operator evidence says otherwise.

IAT, external security review, and v1.0.0-beta.0 remain open gates before GA claims.

✅ Live today

Merged to main and available on abraxasworld.xyz (beta deployment).

✓ Partner Flow integration kit + OpenAPI contract (abraxasworld.xyz)✓ Partner Flow evaluate / complete / refresh APIs✓ Fail-closed partner return URL allowlist✓ Public + partner-authenticated receipt verification✓ P1-2 fail-closed trust evaluation + server-derived idempotency (PR #113)✓ P1-3 partner-flow audit metadata + trace analyzer (PR #114)✓ Integration preflight script (npm run integration:preflight)✓ External security-review readiness package (docs only, PR #115)✓ Google zkLogin + browser session for holder routes✓ Good Trouble hosted pilot checkout UI (/good-trouble/*)

🧪 Beta-ready — pending human evidence

Code and operator tooling exist; production sign-off or pilot evidence still required.

Good Trouble pilot/sandbox integration (not GA production policy until evidenced)Production IAT scenarios A–D (walkthrough checklist exists; results unsigned)Partner-flow trace audit on real flow_trace_id (CLI ready; operator must run)Refresh replacement receipt cycles on live expired receiptsSecond relying party self-serve onboarding

⛔ Release gates — pending / blocked

Explicit gates that must not be marked complete without signed evidence.

Institutional Acceptance Test (IAT) — NOT completeIndependent external security review — NOT completev1.0.0-beta.0 baseline tag — NOT createdPROTOCOL_COMPATIBILITY freeze sign-off — code complete; IAT evidence pendingRELEASE_DECISION.md — draft onlyP1-1 immutable policy versions — code merged; apply migration 055 in Supabase

🔭 Later / out of scope (current cycle)

Intentionally deferred; not required for first pilot wiring.

On-chain Move passport mainnetMoonPay / fiat ramp productionSelf-serve partner dashboardRate limiting at edgeP1-4 biometric telemetry persistenceGeneral availability (GA) marketing claim

Long-term vision

These directions inform category positioning — they are not current commitments. Work expands after beta gates and a second relying party clear production.

Open mainnet deploymentToken utility & governanceMarketplace & liquidity infrastructureDAO coordination layer